Cloudera Docs

Configuring RAZ service for S3 object stores

After you add the Ranger Remote Authorization Service (RAZ) service and configure the Knox IDBroker role for S3 object stores, you must configure the RAZ service for S3 object stores.

  1. Go to Cloudera Manager > Ranger RAZ > Configuration.
  2. Add the following configurations in the Ranger Raz Server Advanced Configuration Snippet (Safety Valve) for ranger-raz-conf/ranger-raz-site.xml advanced configuration snippet:
    • Key: ranger.raz.bootstrap.servicetypes

      Value: s3

    • Key: ranger.raz.force.s3.region.lookup

      Value: FALLBACK